gce/jenkins.yml

apiVersion: v1
kind: Pod
metadata:
  name: jenkins
spec:
  containers:
    - name: jenkins-master
      image: gcr.io/bazel-public/jenkins-master
      imagePullPolicy: Always
      volumeMounts:
        - name: jenkins-home
          mountPath: /var/jenkins_home
          readOnly: false
        - name: secrets
          mountPath: /opt/secrets
          readOnly: true
      ports:
        - name: www
          containerPort: 8080
          hostPort: 80
          protocol: TCP
        - name: jenkins-slave
          containerPort: 50000
          hostPort: 50000
          protocol: TCP
    - name: deploy-slave
      image: gcr.io/bazel-public/deploy-slave
      imagePullPolicy: Always
      volumeMounts:
        - name: secrets
          mountPath: /opt/secrets
          readOnly: true
    - name: sync-gerrit-github
      image: gcr.io/bazel-public/sync-gerrit-github
      imagePullPolicy: Always
      volumeMounts:
        - name: secrets
          mountPath: /opt/secrets
          readOnly: true
  restartPolicy: Always
  dnsPolicy: Default
  volumes:
    - name: jenkins-home
      hostPath:
        path: /volumes/jenkins_home
    - name: secrets
      hostPath:
        path: /volumes/secrets